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. C. AMENDMENTS TO THB CLAIMS 

1. (Currently Amended) A method for analyzing database 
security r said method comprising: 

connecting to one or more servers, wherein each server 
includes ari instance, the instance including one or more 
databases; 

selecting one of the databases; 

Identifying a user id, wherein the user id has access to 
the selected databases; 

retrieving a permitted user id list corresponding to the 
selected database; 

determining whether the user id is included in the 
permitted user id list; and 

reporting the user id in response to the determining. 

(Original) The method as described in claim 1 further 
comprising: 

retrieving a resolution corresponding to the determining; 
and 

including the resolution in the reporting. 

(Original) The method as described in claim 1 wherein the 
determining further comprises: 

identifying a violation message type wherein the 
violation message type is selected from the group 
consisting of a removed users check, a DB files and logs 
access check, and a DB backup files and logs access 
check. 

4. (Original) The method as described in claim 1 wherein the 
database , is select^^^ consisting of a 
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database, a backup database, and a directory of 
databases . 

(Original) ' The method as described in claim 1 wherein the 
connection is secure. 

(Original) The method as described in claim 1 wherein the 
permitted user id list is selected from the group 
consisting of a database instance owner, a sysadm gro.up, 
and a sysmaint group. 

(Original) The method as described in claim 1 wherein the 
servers are on different operating platforms. 
(Currently, Amended) An information handling system 
comprising: 

one or more processors; 
a memory accessible by the processors; 

one or more nonvolatile storage devices accessible by the 
processors; and 

a database analysis tool to analyze database security, 
the database analysis tool including: 

means for connecting to one or more servers, wherein 
each server includes an instance, the instance 
including one or more databases; 
means for seiec^ the databases; 

means for identifying a user id, wherein the user id 
has access to the selected databases; 
means for retrieving a permitted user id list 
corresponding to the selected database; 
means., for determining whether the user id is 
included in the permitted user id list; and 
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means for reporting the user id in response to the 
determining • 

9. (Original) The information handling system as described 
in claim 8 further com^prlsing: 

retrieving a resolution corresponding to the determining; 
and 

including the resolution in the reporting. 

10. (Original) The information handling system as described 
in claim 8 wherein the determining further comprises: 
identifying a violation message type wherein the 
violation message type is selected from the group 
consisting of a removed users cheeky a DB files and logs 
access check, and a DB backup files and logs access 
check. . 

11. (Original) The information handling system as described 
in claim 8 wherein the database is selected from a group 
consisting of a database, a backup database, and a 
directory of databases - 

12- (Original) The information handling system as described 

in claim 8 wherein the permitted user id list is selected 
from the group consisting of a database instance owner, a 
sysadm group, and a sysmaint group. 

-13. (Original) The information handling system as described 

.in claim 8..v/herein..the servers are on different operating 
platforms . 
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14* (Currently Amended). A computer program product stored in 
a coWuter bpera^^^ for analyzing database 

security^ said computer program product comprising: 
means for connecting to one or more servers/ wherein each 
server Includes an instance, the instance including one 
or more databases; 

means for selecting one of the databases; 
means for identifying a user id/ wherein the user id has 
access to the selected databases; 
means for retrieving a permitted user id list 
corresponding to the selected databases- 
means for determining whether the user id is included in 
the permitted user id list; and 

means for reporting the user id in response to the 
determining - 

15 • (Original) The computer program product as described in 
claim 14 further' comprising: 

retrieving a resolution corresponding to the determining; 
and 

including the resolution in the reporting. 

16. (Original) The computer program product as described in 
claim 14 wherein the determining further comprises: 
identifying a violation message type wherein the 
violation message type is selected from the group 
consisting of a removed users checks a DB files and logs 
access check, and a DB backup files and logs access 
check. 
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17. (OrrQin^l) The jS product as described in 
claim 14 wherein the database is selected from a group 
consisting of a database^ a backup database, and a 
directory of databases . 

18. (Original) The computer program product as described in 
claim 14 wherein the connection is secure. 

19. (Original) The computer program product as described in 
claim 14 wherein the permitted user id list is selected 
from the group consisting of a database instance owner , a 
sysadm group, and a sysmaint group- 

20. (Original) The computer program product as described in 
claim 14 wherein the servers are on different operating 
platforms . 
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